StackRadar

superset 1.2.0 Helm chart

cloudposse

Scored 14 Sept 2026

Apache Superset (incubating) is a modern, enterprise-ready business intelligence web application

Version 1.2.0 11 months agoapp version 0.35.2 7Artifact Hub

superset 1.2.0 deploys 1 container image: amancevice/superset. Across them, 387 findings1 critical, 9 high 4 on CISA KEV. The highest contribution is GHSA-5cx2-vq3h-x52c in apache-superset 0.35.2, fixed in 2.1.0.

Radar Score

5,85119120256

387 findings over 1 of 1 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
amancevice/superset0.35.2191202565,851

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

387 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDSA-4930-1libwebp@0.6.1-20.6.1-2+deb10u1
LowPYSEC-2022-48protobuf@3.11.23.15.0
LowGHSA-43fp-rhv2-5gv8certifi@2019.11.282022.12.07
LowPYSEC-2026-3553cryptography@2.749.0.0
LowGHSA-wf93-45jw-7689pip@19.3.126.1.2
LowGHSA-rrm6-wvj7-cwh2sqlparse@0.3.00.4.4
LowGHSA-xgmm-8j9v-c9wxpyjwt@1.7.12.13.0
LowGHSA-6p56-wp2h-9hxrnumpy@1.17.01.21
LowPYSEC-2026-781apache-superset@0.35.21.5.3
LowDLA-3114-1mariadb-10.3@1:10.3.18-0+deb10u11:10.3.36-0+deb10u1
LowDLA-3165-1expat@2.2.6-2+deb10u12.2.6-2+deb10u6
LowGHSA-3m2g-v7jf-7fxcapache-superset@0.35.26.0.0
LowDLA-3118-1unzip@6.0-23+deb10u16.0-23+deb10u3
LowGHSA-h75v-3vvj-5mfjjinja2@2.10.13.1.4
LowDLA-3429-1imagemagick@8:6.9.10.23+dfsg-2.18:6.9.10.23+dfsg-2.1+deb10u5
LowGHSA-v92g-xgxw-vvmmmako@1.0.141.3.11
LowGHSA-m4p7-r5rc-7g4jpyasn1@0.4.80.6.4
LowGHSA-9hjg-9r4m-mvj7requests@2.22.02.32.4
LowGHSA-8qvm-5x2c-j2w7protobuf@3.11.24.25.8
LowDLA-3782-1util-linux@2.33.1-0.12.33.1-0.1+deb10u1
LowGHSA-wfjw-w6pv-8p7fflask-appbuilder@2.1.133.4.4
LowDLA-3586-1ncurses@6.1+20181013-2+deb10u26.1+20181013-2+deb10u4
LowDLA-3692-1curl@7.64.0-47.64.0-4+deb10u8
LowDSA-4782-1openldap@2.4.47+dfsg-3+deb10u12.4.47+dfsg-3+deb10u3
LowGHSA-8ppf-4f7h-5ppjpyasn1@0.4.80.6.4
LowGHSA-hm4w-wwcw-mr6rpyasn1@0.4.80.6.4
LowDLA-3119-1expat@2.2.6-2+deb10u12.2.6-2+deb10u5
LowDLA-3763-1curl@7.64.0-47.64.0-4+deb10u9
LowGHSA-h5c8-rqwp-cp95jinja2@2.10.13.1.3
LowDLA-3263-1libtasn1-6@4.13-34.13-3+deb10u1
LowDLA-3758-1tiff@4.0.10-44.1.0+git191117-2~deb10u9
LowGHSA-29vq-49wr-vm6xwerkzeug@0.15.53.1.6
LowGHSA-hc74-9vjm-c9xvapache-superset@0.35.23.0.0
LowGHSA-hgf8-39gv-g3f2werkzeug@0.15.53.1.4
LowDLA-3398-1curl@7.64.0-47.64.0-4+deb10u6
LowPYSEC-2026-1187apache-superset@0.35.22.1.1
LowDSA-4915-1postgresql-11@11.5-1+deb10u111.12-0+deb10u1
LowPYSEC-2024-3pycryptodomex@3.9.43.19.1
LowGHSA-mwf2-qr4v-94h2apache-superset@0.35.26.0.0
LowDSA-4869-1tiff@4.0.10-44.1.0+git191117-2~deb10u2
LowDLA-3072-1postgresql-11@11.5-1+deb10u111.17-0+deb10u1
LowDSA-5006-1postgresql-11@11.5-1+deb10u111.14-0+deb10u1
LowDLA-3070-1gnutls28@3.6.7-43.6.7-4+deb10u9
LowDLA-3236-1openexr@2.2.1-4.12.2.1-4.1+deb10u2
LowGHSA-prg7-hcfm-mfcrsqlparse@0.3.00.6.0
LowGHSA-2cx9-54hp-r698apache-superset@0.35.24.1.0
LowDLA-3783-1expat@2.2.6-2+deb10u12.2.6-2+deb10u7
LowDLA-3240-1libde265@1.0.3-1+b11.0.3-1+deb10u1
LowDLA-3280-1libde265@1.0.3-1+b11.0.3-1+deb10u3
LowDLA-3764-1postgresql-11@11.5-1+deb10u111.22-0+deb10u2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.2.0latest11 months ago0.35.2191202565,851

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/cloudposse/superset.svg)](https://charts.stackradar.io/charts/cloudposse/superset)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.